poligrevix-official[.]com

Analysis of the domain poligrevix-official.com indicates a high-risk brand impersonation phishing operation targeting Across, a recognized entity in the decentralized finance space. The domain was registered on February 21, 2026, through Dynadot LLC and is currently offline, returning an HTTP 403 status. Infrastructure analysis reveals Cloudflare hosting (AS13335) with an IP resolution to 188.114.96.3, located in the US, and nameservers lilith.ns.cloudflare.com and memphis.ns.cloudflare.com. The SSL certificate is issued by Google Trust Services (WE1), a common choice for both legitimate and malicious sites, offering no definitive classification on its own.

Security vendors have flagged this domain on three blocklists, including PhishDestroy, MetaMask, and SEAL, and 13 of 93 vendors on VirusTotal detect it as malicious. The page title, 'Poligrevix – Trusted AI Trading Platform,' suggests an attempt to mimic a financial or trading service, aligning with the brand impersonation classification. Gridinsoft assigns a trust score of 0/100, reinforcing the high-risk assessment. While the domain is currently offline, the infrastructure and detection patterns remain consistent with active phishing campaigns.

Defenders should treat this domain as compromised and maintain blocklist entries to prevent re-emergence. No evidence of a specific phishing kit or additional payloads is present in the available data, and the exact content of the site has not been analyzed. Organizations should monitor for similar domains registered through Dynadot or utilizing Cloudflare with comparable naming conventions, particularly those impersonating financial or DeFi platforms.